Network Security Architect

Metrobank; Hinoba-an; On-site; PHP 600,000 - 900,000; Full time

Job summary

Metrobank is seeking a Network Security Engineer to design, implement, and maintain security solutions for the bank’s systems and data. You will enforce security standards, manage tools, assess risks, and guide security improvements across the network infrastructure.

The role requires hands-on experience in penetration testing, networking, and security policy development, with the ability to communicate complex concepts to technical and non-technical audiences.

Qualifications

• Bachelor’s degree in computer science, Information Security, Cybersecurity, or a related technical field.
• Strong understanding of security vulnerabilities, common attack techniques, and attacker mindset to identify threats.
• Knowledge of OWASP Top 10 Application Security risks and best practices.
• Certifications such as OSCP, GPEN, GWAP, CEH or equivalent are preferred.
• Hands-on experience in ethical hacking and penetration testing.
• Strong technical knowledge of networking, digital forensics, reverse engineering, web applications, databases, and wireless technologies.
• Proficient in scripting and programming to support security testing and assessments.
• Understanding of the business and financial impact of cybersecurity incidents and breaches.
• Strong analytical and problem-solving skills.
• Results-driven with focus on risk reduction and remediation.
• Excellent collaboration and leadership abilities in security initiatives.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Excellent time management and ability to perform in a fast-paced environment.
• Self-motivated, organized, and capable of working independently.

Responsibilities

• Develops detailed designs for implementation based on approved IT security systems and infrastructure architecture.
• Reviews and maintains IT security policies, standards, procedures, and guidelines for securing IT environments and third-party services.
• Provides support to CPSD and SQRD as security SME to identify design gaps and recommend changes.
• Evaluates cost-effective solutions and prepares business cases for IT security projects.
• Manages testing of technical controls related to network security and monitors implementation.
• Defines and documents network security tool configuration parameters and ensures secure operation.
• Performs regular security configuration reviews to ensure efficacy of controls.
• Monitors and assists ITG in timely resolution of security device issues.
• Reviews installation and changes to security infrastructure and assesses impact on security posture.
• Manages implementation of baseline security standards across legacy systems.
• Collaborates with ISD departments to provide holistic services to internal customers.
• Establishes and tests disaster recovery strategy for network security tools.
• Keeps up to date with latest security technology, trends, vulnerabilities and threats.
• Works with SAID Head on security programs and governance improvements.
• Performs other information security governance, risk and compliance duties as directed.

Skills

Attacker mindset

Penetration testing

Networking

Digital forensics

Reverse engineering

Web applications

Databases

Wireless technologies

Scripting

Programming

Risk awareness

Analytical thinking

Problem solving

Team leadership

Communication

Time management

Self-motivation

Organization

Independence

Education

Bachelor’s degree in computer science / Information Security / Cybersecurity

OSCP/GPEN/GWAP/CEH certifications

Tools

OWASP Top 10

Job description

Metrobank is seeking a Network Security Engineer to design, implement, and maintain security solutions for the bank’s systems and data. You will enforce security standards, manage tools, assess risks, and guide security improvements across the network infrastructure.

The role requires hands-on experience in penetration testing, networking, and security policy development, with the ability to communicate complex concepts to technical and non-technical audiences.